Description
Currently all users or roles provided by an external resource during synchronization - or sent to an external resource during push - are considered for synchronization or push (with matching / unmatching rules).
It is a powerful addition to provide a mean to safely ignore user or roles - a proper place for implementing such custom logic is SyncActions / PushActions.